
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier: uuIHYGZ+j+MgEvf7mw7XOexuUWAozc+4F6pu3ZACrpA=
Subject key identifier: 87:C6:EF:3F:07:BE:41:E5:7B:CF:67:24:6B:0C:92:96:6B:54:1D:CD
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 108E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number: 106D
Signing time: Fri 12 Jun 2026 17:22:08 +0000
Manifest this update: Fri 12 Jun 2026 17:22:08 +0000
Manifest next update: Fri 19 Jun 2026 17:22:08 +0000
Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: kYACGjCnv0PWb1OEdR9a/wB4xiibfmSfn/WkjMlNceY=)
2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: 6dJXIvYHzCnEDXXSTc0Eos17d9MIrK7ku8xw5lKvqNQ=)
3: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nTtKzX6nzx2xavwKMXRS2HOpDCquUtryYE0DdxLYbWk=)
4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: RVqLv3EtRj5ErqJMVVt6m4xRrHJQaRXNG5AD8ZsgIFk=)
5: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: +mWwcwjzpPjSVEv9OnV6PLbugEi6LgvVywkhj6tvDeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238 (0x108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: Jun 12 17:22:08 2026 GMT
Not After : Jun 19 17:22:08 2026 GMT
Subject: CN=6a2c4040-2fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:cf:46:fc:af:a4:c9:e4:cd:48:7b:73:2c:
71:95:49:3b:38:fa:58:6c:c8:ae:57:30:ed:bf:b4:
a2:3b:8e:8b:d5:b0:12:65:ff:8b:99:b3:d9:5a:95:
d0:22:df:e6:80:23:43:dc:6d:16:13:05:dd:d6:05:
51:60:5b:48:55:fa:df:02:36:35:6c:cb:9a:52:e8:
79:a6:83:42:f2:ee:a6:b0:02:b8:e9:d4:19:2d:08:
fe:29:50:9c:49:a2:2c:dc:3a:19:ef:30:b9:4a:68:
63:e8:20:ea:6f:81:68:76:2c:e0:72:80:77:3a:cf:
f1:40:72:b2:3e:72:db:a0:26:4c:44:9e:a8:5b:c5:
6e:9c:0a:19:8c:9b:08:2e:41:f2:14:2e:17:47:16:
25:c1:81:78:17:b6:eb:0f:e2:dc:7d:b7:67:f6:00:
06:38:b7:d4:db:c5:e5:22:94:4e:19:92:d7:3d:2d:
96:28:9d:9e:3c:49:7b:8f:20:b8:eb:15:5c:5f:9f:
73:aa:bf:81:bf:15:50:80:9c:1f:52:e3:56:75:46:
99:24:ab:00:21:99:b1:1d:10:88:5d:df:bc:77:72:
e3:8f:6d:0d:4f:33:ec:56:bd:c7:27:e1:d1:97:8a:
36:24:c0:ea:e9:20:8b:a5:48:cc:f7:af:70:b1:20:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:EF:3F:07:BE:41:E5:7B:CF:67:24:6B:0C:92:96:6B:54:1D:CD
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2e:ca:b4:c2:b2:d7:32:94:3d:b8:9f:31:f5:f9:81:84:13:
ce:fa:99:34:b3:7b:99:36:e4:3a:99:1b:4c:81:a7:8a:c6:78:
a5:0f:a0:4f:95:de:92:40:98:c4:4e:41:0d:32:cd:62:d2:f2:
fd:ad:f8:10:cb:ff:34:cc:c5:74:43:b2:70:9a:cf:aa:d5:a6:
07:66:f2:cd:31:12:dc:3c:62:99:d0:3e:e9:73:6f:92:29:b7:
6e:03:30:55:cc:2e:5b:c5:a1:89:1a:28:ea:aa:dc:46:c1:c9:
d1:28:b1:b2:d9:6f:37:50:5e:3e:76:97:02:8f:e8:65:64:ff:
d7:a4:3c:7c:2c:90:da:9b:de:fc:06:68:e7:af:8a:0b:33:f8:
bc:0f:fe:49:48:a0:29:67:92:e6:6c:26:34:dc:90:ba:76:6d:
c6:3d:5c:4e:ab:bb:2a:f9:ca:2a:db:bd:d6:ac:9f:19:c3:d8:
62:36:af:1b:90:84:ad:54:93:f0:77:c3:9b:21:ad:58:78:d7:
95:eb:8a:5b:dd:21:3a:12:b5:86:f6:b1:3a:54:c1:ed:d4:a4:
a3:3c:9d:7d:3a:33:9d:a1:4b:38:55:2b:3d:39:0e:e8:44:45:
09:49:6b:fe:65:9b:72:00:ac:8b:d3:38:37:22:f8:8b:50:b7:
7e:a9:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:08 2026 by rpki-client